Behavioral task
behavioral1
Sample
cffcf024c3f77bd3ddc709d159e1d4f2_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
cffcf024c3f77bd3ddc709d159e1d4f2_JaffaCakes118
-
Size
1.1MB
-
MD5
cffcf024c3f77bd3ddc709d159e1d4f2
-
SHA1
75e31b9dcc5af9b3bfb43f50762551fe41d539fc
-
SHA256
0d0b4d365b572367ee30af7bbf8404c5eed4884efce3edcf66965f03b8cd2715
-
SHA512
e5172a84c8a0e7489ee4f8e638e4b2696e527240275485956962d5d926ff80a0b308ed614e38d4be4c2f8a15d44a7c3ecd76e6aa127e99e03c058aab6b23d594
-
SSDEEP
24576:WsSj/dtNPdNAf6PN2iLPK87Czhq704dNdYy5uqj76K6J7:lSjvJdNAS1rLPBwq7ndNdh88eKi
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cffcf024c3f77bd3ddc709d159e1d4f2_JaffaCakes118
Files
-
cffcf024c3f77bd3ddc709d159e1d4f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE